$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: tSuWA9BFOK/JzEyf14z8EvUCQQ6nl2vsWYQqUgYQQ5Q= Subject key identifier: 5A:93:06:25:CD:B2:10:8E:4D:98:6D:6F:5A:32:B4:0D:B0:0F:F4:0C Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 081B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 0804 Signing time: Sun 02 Nov 2025 21:05:24 +0000 Manifest this update: Sun 02 Nov 2025 21:05:23 +0000 Manifest next update: Sun 09 Nov 2025 21:05:23 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: l9fBO79IhEWohgPmW0ExbZ+drHpFBS+/Zz8jtPCs9S0=) 2: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (hash: +XIvNmYB/5EgcsxvZK5ch01j/uNHHViQProaEC6+kLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Nov 2 21:05:23 2025 GMT Not After : Nov 9 21:05:23 2025 GMT Subject: CN=6907c794-8fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:07:24:75:4c:0a:38:4a:98:d2:92:52:6f: 4e:72:36:3b:a3:ea:e7:05:66:56:26:a5:ef:d2:89: 70:6f:0e:61:e7:fb:7d:65:43:e9:c0:bf:ee:0e:ae: 50:63:41:a1:b0:cd:1e:9a:41:5e:88:f1:a0:5d:af: e0:2f:6a:72:13:ac:5a:89:a7:67:dc:f7:ca:f0:ae: 7a:97:46:a2:49:0d:c1:2d:71:8a:65:a3:a5:00:4b: 45:d0:9a:a1:71:a2:18:5f:1f:b8:53:19:f5:79:f5: fc:2b:dd:94:77:bc:99:62:42:ec:22:5c:bd:08:af: e4:00:4d:de:1c:29:2e:24:59:58:3a:21:c3:96:85: 45:03:77:d1:46:6e:76:5f:f2:e7:67:62:c9:d5:d2: be:de:87:05:0b:f9:b2:25:79:2a:b6:9e:89:c5:09: 0a:96:00:9a:d6:49:0c:db:96:5e:f3:00:31:a5:e4: 27:67:cb:80:f6:f8:d0:4f:41:70:75:58:fd:16:d6: d9:e8:7d:a6:99:04:1d:ee:4e:e6:b2:b8:d3:c8:61: 41:f8:2d:a4:b9:de:45:c8:49:e8:09:da:c6:07:4f: 38:da:e1:9d:6d:3f:39:09:79:e1:fa:ff:52:cf:cf: 0f:84:3b:ff:27:70:6f:02:eb:74:48:87:bd:fb:fc: 4a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:93:06:25:CD:B2:10:8E:4D:98:6D:6F:5A:32:B4:0D:B0:0F:F4:0C X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6d:b1:b7:37:04:b8:e5:98:34:71:c5:99:ce:f0:09:a2:e1: 55:bb:24:af:6e:69:03:60:2c:53:1f:de:9d:68:4f:9a:45:be: 60:31:2d:5f:e3:0a:9d:e8:d6:77:b5:ad:03:3a:b8:e2:1c:5e: 95:1c:17:28:c3:5f:74:ed:cb:69:bc:b3:35:79:97:c4:9d:d5: 96:63:7d:96:89:94:54:84:10:56:ec:cc:bd:9e:33:bb:ae:4e: 5d:c0:33:79:19:01:34:41:0f:91:ef:48:00:bc:9c:f7:ce:ed: d6:44:2a:24:ae:41:80:03:07:f0:66:52:87:e5:67:fd:76:20: 2b:63:c0:f6:32:88:56:15:6e:e8:b9:1e:bb:60:d4:f5:79:3a: 4a:85:02:0a:19:6a:70:3d:45:17:fd:5a:44:2a:a1:12:06:e0: 36:c4:39:6d:03:47:a5:78:c9:43:bd:29:96:28:11:3b:12:cc: 74:53:72:ad:5a:32:0e:7b:7f:77:4a:f4:ae:7b:8c:1f:8e:fb: 7d:57:6e:ce:5d:c3:94:dc:98:ae:86:06:de:47:b7:35:20:40: 58:89:6e:83:ec:c5:31:80:28:9a:a4:38:c4:ac:02:43:d6:96: 3d:1c:45:a6:1b:fb:67:7a:27:c6:0a:0b:f1:dd:a5:10:69:54: c0:34:c7:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUxMTAyMjEwNTIzWhcNMjUxMTA5MjEwNTIzWjAYMRYwFAYD VQQDEw02OTA3Yzc5NC04ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs08HJHVMCjhKmNKSUm9OcjY7o+rnBWZWJqXv0olwbw5h5/t9ZUPpwL/uDq5Q Y0GhsM0emkFeiPGgXa/gL2pyE6xaiadn3PfK8K56l0aiSQ3BLXGKZaOlAEtF0Jqh caIYXx+4Uxn1efX8K92Ud7yZYkLsIly9CK/kAE3eHCkuJFlYOiHDloVFA3fRRm52 X/LnZ2LJ1dK+3ocFC/myJXkqtp6JxQkKlgCa1kkM25Ze8wAxpeQnZ8uA9vjQT0Fw dVj9FtbZ6H2mmQQd7k7msrjTyGFB+C2kud5FyEnoCdrGB0842uGdbT85CXnh+v9S z88PhDv/J3BvAut0SIe9+/xK1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqTBiXN shCOTZhtb1oytA2wD/QMMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMbbG3NwS45Zg0ccWZzvAJouFVuySvbmkDYCxTH96daE+aRb5gMS1f 4wqd6NZ3ta0DOrjiHF6VHBcow1907ctpvLM1eZfEndWWY32WiZRUhBBW7My9njO7 rk5dwDN5GQE0QQ+R70gAvJz3zu3WRCokrkGAAwfwZlKH5Wf9diArY8D2MohWFW7o uR67YNT1eTpKhQIKGWpwPUUX/VpEKqESBuA2xDltA0eleMlDvSmWKBE7Esx0U3Kt WjIOe393SvSue4wfjvt9V27OXcOU3JiuhgbeR7c1IEBYiW6D7MUxgCiapDjErAJD 1pY9HEWmG/tneifGCgvx3aUQaVTANMdi -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:17 2025 by rpki-client